Skip to content
Permalink
Browse files

ports.php: add some forgotten escaping

git-svn-id: https://svn.macports.org/repository/macports/trunk/www@37825 d073be05-634f-4543-b044-5fe20cf6d1d6
  • Loading branch information
ryandesign committed Jun 24, 2008
1 parent a1e6252 commit b4c6a3a17308bc842b27bd51875ba83375bb82cb
Showing with 3 additions and 3 deletions.
  1. +3 −3 ports.php
@@ -139,7 +139,7 @@
if ($i == $page) {
$pagecontrol .= "<b>$i</b>";
} else {
$pagecontrol .= "<a href=\"$_SERVER[PHP_SELF]?by=$by&amp;substr=$substr&amp;page=$i&amp;pagesize=$pagesize\">$i</a>";
$pagecontrol .= "<a href=\"$_SERVER[PHP_SELF]?by=$by&amp;substr=" . htmlspecialchars($substr) . "&amp;page=$i&amp;pagesize=$pagesize\">$i</a>";
}
}
$pagecontrol .= "</p>";
@@ -164,7 +164,7 @@
$row = mysql_fetch_assoc($result), $i++) {

/* Port name and Portfile URL */
print "<dt><b><a href=\"${trac_url}browser/trunk/dports/$row[path]/Portfile\">" . htmlspecialchars($row['name'])
print "<dt><b><a href=\"${trac_url}browser/trunk/dports/" . urlencode($row['path']) . "/Portfile\">" . htmlspecialchars($row['name'])
. '</a></b> ' . htmlspecialchars($row['version']) . '</dt>';

print '<dd>';
@@ -181,7 +181,7 @@
while ($nrow = mysql_fetch_row($nresult)) {
if ($primary) { print ' <b>'; }
else { print ' '; }
print obfuscate_email($nrow[0]);;
print htmlspecialchars(obfuscate_email($nrow[0]));
if ($primary) { print '</b>'; }
$primary = 0;
}

0 comments on commit b4c6a3a

Please sign in to comment.
You can’t perform that action at this time.